$ rpki-client -vvf rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft File: 2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft (raw, json) Hash identifier: JYg4lQhD3PhQsmpX9GWG+1fFgYeMKwLAyWr1EzeQDjQ= Subject key identifier: 6A:A2:63:46:44:C3:4D:F6:E4:35:00:5D:33:DD:18:0A:23:F5:1B:79 Authority key identifier: 2C:9C:59:4E:93:6E:1E:28:AD:5A:D7:3A:6B:F2:8A:E3:8C:00:28:FB Certificate issuer: /CN=2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB Certificate serial: 0F4461C2B69FD054808CB3F8EE9C01292A1BC157 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer Subject info access: rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft Manifest number: 02A2 Signing time: Sat 23 Aug 2025 06:32:11 +0000 Manifest this update: Sat 23 Aug 2025 06:27:11 +0000 Manifest next update: Sun 24 Aug 2025 10:02:11 +0000 Files and hashes: 1: 3230382e35322e3136322e302f32332d3234203d3e20323638363238.roa (hash: maW2GNrI3AoqX8WFxWiMg/YOqECnU1fsdQA4kdJdduU=) 2: 34352e3136342e3138382e302f32322d3234203d3e20323638363238.roa (hash: MFaOGmG3uk10MnFBlQJ/Pj6U7TcWeAadSbIdDIDPMAE=) 3: 2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl (hash: rV96TtWVJQA5xgKuA1dg3RyFjFLFpGoW1h1XSAIvgXc=) 4: 323830343a353431383a3a2f33322d3438203d3e20323638363238.roa (hash: hHMhRh5DdSaR5fzUNnHJawbPKzBIyAZaoDmsUo8IWgk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 09:03:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:44:61:c2:b6:9f:d0:54:80:8c:b3:f8:ee:9c:01:29:2a:1b:c1:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB Validity Not Before: Aug 23 06:27:11 2025 GMT Not After : Aug 24 10:02:11 2025 GMT Subject: CN=6AA2634644C34DF6E435005D33DD180A23F51B79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fa:04:d4:82:06:80:cb:44:6f:fe:e1:33:1a: 8f:96:fa:07:56:01:e0:b6:51:0a:56:8e:d2:79:eb: d8:2e:b1:5b:b5:8d:76:85:cd:25:f6:c1:9d:f2:0b: 51:c0:96:c9:ee:b2:97:74:dd:49:0a:41:e2:7f:b1: 1e:7f:9f:b2:ea:3a:4e:fa:e7:05:03:96:df:07:a1: 17:fc:30:bc:1e:f9:92:a0:de:da:0c:aa:a6:57:c5: ea:b6:9f:aa:c4:3c:12:4f:1a:42:60:40:f4:b9:31: ca:88:c3:99:cd:c6:53:af:67:f5:93:bf:61:c9:d8: fd:e1:b3:75:e9:f8:c0:e2:ce:c3:3d:98:89:d1:ca: 8c:41:e7:52:fe:23:8e:de:15:06:18:2d:86:d9:e3: 66:3a:73:e1:06:80:5a:2c:e6:40:0c:72:3a:55:8c: 05:dd:9d:66:3b:95:5f:fb:7c:e9:00:a5:70:77:54: e1:2b:ab:4d:1b:50:e7:ed:61:3c:37:33:a1:a4:76: e4:74:7a:42:ff:ae:89:3f:5e:ea:52:ed:3b:2e:4d: 73:c9:45:9d:ea:d4:2d:09:ae:c0:35:1a:77:25:54: 6b:8b:34:8e:cf:31:af:ee:9f:70:4e:e0:2d:1d:6c: ad:18:51:3f:c3:3b:31:d4:fb:d0:43:c4:1e:9f:5e: 80:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:A2:63:46:44:C3:4D:F6:E4:35:00:5D:33:DD:18:0A:23:F5:1B:79 X509v3 Authority Key Identifier: keyid:2C:9C:59:4E:93:6E:1E:28:AD:5A:D7:3A:6B:F2:8A:E3:8C:00:28:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:5c:cc:c1:be:da:f9:66:75:11:0d:5b:7f:38:91:cd:88:a8: bd:e1:50:54:2b:16:cd:23:84:a1:81:c9:82:e9:78:94:bf:46: 28:c5:cd:b7:ad:6f:dc:9c:36:57:e3:03:19:e8:ba:99:9a:1b: 8d:c3:ad:76:77:35:9a:62:05:27:5f:1a:a5:4e:de:6b:7d:4a: 75:fe:f9:49:b3:f0:6c:fe:1a:cf:be:d9:94:0b:75:a7:e5:ee: c0:69:a0:10:d6:a3:0c:5a:1d:55:b0:bb:48:c9:9f:9e:69:11: 3b:05:fd:7d:e3:a6:68:19:d7:cc:84:ad:4d:77:c1:22:88:74: 8e:68:9f:f8:97:d9:6d:b0:87:12:bf:05:36:a1:87:32:54:76: 0e:5b:da:24:ca:29:ed:f9:dc:68:e6:4d:4c:4d:76:40:08:34: 5c:4f:75:29:c8:6d:e9:56:5a:13:03:30:a1:a4:a1:e5:db:79: 9e:ed:4f:3a:83:02:fb:fd:d7:3e:9c:2e:24:e7:30:a6:3b:0f: 27:11:fe:e4:64:b8:66:17:bc:63:71:1b:be:31:ed:11:2a:5c: 70:af:39:f7:08:ce:8b:cd:45:26:54:d7:57:6f:b0:67:0a:a0: 61:5b:06:43:3b:e7:af:43:df:05:23:e1:50:c5:9f:c9:52:f7: b9:ec:da:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUD0Rhwraf0FSAjLP47pwBKSobwVcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM5QzU5NEU5MzZFMUUyOEFENUFENzNBNkJGMjhBRTM4 QzAwMjhGQjAeFw0yNTA4MjMwNjI3MTFaFw0yNTA4MjQxMDAyMTFaMDMxMTAvBgNV BAMTKDZBQTI2MzQ2NDRDMzRERjZFNDM1MDA1RDMzREQxODBBMjNGNTFCNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF+gTUggaAy0Rv/uEzGo+W+gdW AeC2UQpWjtJ569gusVu1jXaFzSX2wZ3yC1HAlsnuspd03UkKQeJ/sR5/n7LqOk76 5wUDlt8HoRf8MLwe+ZKg3toMqqZXxeq2n6rEPBJPGkJgQPS5McqIw5nNxlOvZ/WT v2HJ2P3hs3Xp+MDizsM9mInRyoxB51L+I47eFQYYLYbZ42Y6c+EGgFos5kAMcjpV jAXdnWY7lV/7fOkApXB3VOErq00bUOftYTw3M6GkduR0ekL/rok/XupS7TsuTXPJ RZ3q1C0JrsA1GnclVGuLNI7PMa/un3BO4C0dbK0YUT/DOzHU+9BDxB6fXoDPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUaqJjRkTDTfbkNQBdM90YCiP1G3kwHwYDVR0j BBgwFoAULJxZTpNuHiitWtc6a/KK44wAKPswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0JGYkRCRWdadVRnY1k5NmFvQzNNZGlkN0JFOHJqamlwZ3luTDNpbXpy aEEvMS8yQzlDNTk0RTkzNkUxRTI4QUQ1QUQ3M0E2QkYyOEFFMzhDMDAyOEZCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJDOUM1OTRFOTM2RTFFMjhB RDVBRDczQTZCRjI4QUUzOEMwMDI4RkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0JGYkRCRWdadVRnY1k5NmFvQzNNZGlkN0JFOHJqamlwZ3luTDNpbXpyaEEvMS8y QzlDNTk0RTkzNkUxRTI4QUQ1QUQ3M0E2QkYyOEFFMzhDMDAyOEZCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC1zMwb7a+WZ1EQ1bfziRzYioveFQVCsWzSOEoYHJgul4lL9GKMXNt61v3Jw2 V+MDGei6mZobjcOtdnc1mmIFJ18apU7ea31Kdf75SbPwbP4az77ZlAt1p+XuwGmg ENajDFodVbC7SMmfnmkROwX9feOmaBnXzIStTXfBIoh0jmif+JfZbbCHEr8FNqGH MlR2DlvaJMop7fncaOZNTE12QAg0XE91Kcht6VZaEwMwoaSh5dt5nu1POoMC+/3X PpwuJOcwpjsPJxH+5GS4Zhe8Y3EbvjHtESpccK859wjOi81FJlTXV2+wZwqgYVsG Qzvnr0PfBSPhUMWfyVL3uezagA== -----END CERTIFICATE-----Generated at Sat Aug 23 10:44:15 2025 by rpki-client